Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
File: cVOwKU08jbFTBqsQnVBtp0rnCXk.mft (raw, json)
Hash identifier: NBfin+WsruXBxy9U7ST0gt8POWNpkX+dW83ivrkClAc=
Subject key identifier: 09:80:A8:95:82:55:32:B6:06:1C:C2:DE:A8:68:F2:0C:96:E9:28:C9
Authority key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
Certificate issuer: /CN=7153b0294d3c8db15306ab109d506da74ae70979
Certificate serial: 019D99999D14C6227522287209FAC2E7C2A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 04:01:14 +0000
Manifest this update: Fri 17 Apr 2026 04:01:14 +0000
Manifest next update: Sat 18 Apr 2026 04:01:14 +0000
Files and hashes: 1: cVOwKU08jbFTBqsQnVBtp0rnCXk.crl (hash: cX+Gt8aLyWVSKPuYOMAm4eXuiJpGCDGlfmEMw+TdaBE=)
2: uA7Vx2C904r9TfjpNMf_38HK6tA.roa (hash: mh6KzvsWQ7ay62shUSjJavZVXDITnNYoJN+fQex29Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:9d:14:c6:22:75:22:28:72:09:fa:c2:e7:c2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7153b0294d3c8db15306ab109d506da74ae70979
Validity
Not Before: Apr 17 04:01:14 2026 GMT
Not After : Apr 18 04:01:14 2026 GMT
Subject: CN=0980a895825532b6061cc2dea868f20c96e928c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:60:75:2c:ad:79:7f:fb:d7:f3:d5:d5:1d:a1:
93:84:fc:7f:01:7e:2e:c1:76:cd:6c:3f:b7:ec:eb:
44:a2:24:64:00:4a:a5:85:8e:59:70:7b:3b:cd:ea:
61:77:90:af:15:98:bc:0c:3e:31:b9:e2:66:af:24:
35:9c:4a:38:1a:29:ac:b0:18:e3:3c:15:37:e1:37:
87:ef:19:b8:ab:c4:86:d8:49:86:5a:f3:ff:3a:b4:
dd:c1:65:46:b0:35:dd:97:92:45:2e:a0:12:b9:d8:
8a:c2:0e:54:7a:8c:5a:30:b7:60:ad:81:b8:cf:47:
9f:ba:85:6e:d1:a2:52:a3:b9:b2:61:24:40:65:fb:
2f:9d:33:e3:ae:34:48:79:ef:96:4b:3f:18:b0:c3:
9f:de:3b:1f:e2:62:99:d2:25:39:dc:ad:a1:d3:67:
33:bd:b6:ea:b9:5e:43:77:7d:29:7b:9a:ff:53:f1:
6b:7a:92:9f:44:a7:40:1e:bf:38:b3:0c:bf:b3:8b:
b2:98:8e:37:84:56:57:b7:9a:cf:58:c2:14:42:a6:
0b:40:77:17:61:d8:16:82:39:91:79:a6:ef:6d:80:
d2:c3:5f:05:12:f8:dd:37:79:cc:6f:5c:0a:68:a7:
e4:13:2d:b6:c6:63:d6:d0:91:9b:84:31:70:fd:fa:
9f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:80:A8:95:82:55:32:B6:06:1C:C2:DE:A8:68:F2:0C:96:E9:28:C9
X509v3 Authority Key Identifier:
keyid:71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d2:01:5c:35:ea:8c:49:45:fe:ce:d6:11:38:c1:d2:4c:68:
06:39:2e:3b:e8:14:56:63:86:81:2f:d9:71:53:09:f6:53:1e:
34:9a:21:75:8c:28:fd:2e:d7:87:aa:25:c9:3d:03:fe:55:e1:
8c:64:db:e0:5f:8f:dd:47:21:06:0e:05:03:fa:57:56:d0:57:
dd:13:66:5b:94:ac:4c:64:42:bd:18:35:0a:3a:ef:c1:66:93:
47:a5:05:2b:6b:15:61:39:cc:aa:6d:07:3d:03:98:57:60:58:
44:76:fe:c1:ab:a4:4e:c7:52:dc:fe:bb:78:47:a5:57:d0:24:
da:c8:cb:62:17:32:32:f9:37:2c:38:93:dd:cf:70:8c:5c:ea:
52:98:a6:cf:d4:05:b3:89:51:8e:ed:3d:e1:07:d8:a5:d2:1a:
4d:5d:20:9f:32:81:41:37:19:b7:6b:81:1f:24:95:bc:bf:89:
a7:86:d7:ee:7d:ed:78:e7:50:23:38:29:cc:56:b7:91:ba:4b:
1b:1a:c1:d6:b6:5c:23:c2:6f:9d:68:60:17:32:3e:31:49:d6:
d2:6f:47:21:70:80:5c:f3:1b:93:73:f9:0f:4f:fe:36:fb:c2:
36:3c:71:92:84:92:0a:e3:5f:52:54:c5:05:7e:f5:27:40:2a:
d9:00:bf:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:24 2026 by rpki-client